cose-js/test/enveloped-tests.js

JavaScript COSE implementation

/* jshint esversion: 6 */
/* jslint node: true */
'use strict';

const cose = require('../');
const test = require('ava');
const jsonfile = require('jsonfile');
const base64url = require('base64url');
const cbor = require('cbor');
const deepEqual = require('./util.js').deepEqual;

function randomSource (bytes) {
  if (bytes === 12) {
    return Buffer.from('02D1F7E6F26C43D4868D87CE', 'hex');
  } else {
    return Buffer.from('61A7', 'hex');
  }
}

test('create aes-gcm-01', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/aes-gcm-01.json');
  const p = example.input.enveloped.protected;
  const u = example.input.enveloped.unprotected;
  const plaintext = Buffer.from(example.input.plaintext);

  const recipients = [{
    key: base64url.toBuffer(example.input.enveloped.recipients[0].key.k),
    u: example.input.enveloped.recipients[0].unprotected
  }];

  const options = {
    randomSource: randomSource
  };
  const header = { p: p, u: u };
  const buf = await cose.encrypt.create(header, plaintext, recipients, options);
  t.true(Buffer.isBuffer(buf));
  t.true(buf.length > 0);
  const actual = cbor.decodeFirstSync(buf);
  const expected = cbor.decodeFirstSync(example.output.cbor);
  t.true(deepEqual(actual, expected));
});

test('create env-pass-01', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-pass-01.json');
  const p = example.input.enveloped.protected;
  const u = example.input.enveloped.unprotected;
  const plaintext = Buffer.from(example.input.plaintext);

  const recipients = [{
    key: base64url.toBuffer(example.input.enveloped.recipients[0].key.k),
    u: example.input.enveloped.recipients[0].unprotected
  }];

  const options = {
    randomSource: randomSource
  };

  const header = { p: p, u: u };
  const buf = await cose.encrypt.create(header, plaintext, recipients, options);
  t.true(Buffer.isBuffer(buf));
  t.true(buf.length > 0);
  const actual = cbor.decodeFirstSync(buf);
  const expected = cbor.decodeFirstSync(example.output.cbor);
  t.true(deepEqual(actual, expected));
});

test('create env-pass-02', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-pass-02.json');
  const p = example.input.enveloped.protected;
  const u = example.input.enveloped.unprotected;
  const plaintext = Buffer.from(example.input.plaintext);

  const recipients = [{
    key: base64url.toBuffer(example.input.enveloped.recipients[0].key.k),
    u: example.input.enveloped.recipients[0].unprotected
  }];

  const options = {
    randomSource: randomSource,
    externalAAD: Buffer.from(example.input.enveloped.external, 'hex')
  };
  const header = { p: p, u: u };
  const buf = await cose.encrypt.create(header, plaintext, recipients, options);
  t.true(Buffer.isBuffer(buf));
  t.true(buf.length > 0);
  const actual = cbor.decodeFirstSync(buf);
  const expected = cbor.decodeFirstSync(example.output.cbor);
  t.true(deepEqual(actual, expected));
});

test('create env-pass-03', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-pass-03.json');
  const p = example.input.enveloped.protected;
  const u = example.input.enveloped.unprotected;
  const plaintext = Buffer.from(example.input.plaintext);

  const recipients = [{
    key: base64url.toBuffer(example.input.enveloped.recipients[0].key.k),
    u: example.input.enveloped.recipients[0].unprotected
  }];

  const options = {
    randomSource: randomSource,
    excludetag: true,
    encodep: 'empty'
  };
  const header = { p: p, u: u };
  const buf = await cose.encrypt.create(header, plaintext, recipients, options);
  t.true(Buffer.isBuffer(buf));
  t.true(buf.length > 0);
  const actual = cbor.decodeFirstSync(buf);
  const expected = cbor.decodeFirstSync(example.output.cbor);
  t.true(deepEqual(actual, expected));
});

test('decrypt aes-gcm-01', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/aes-gcm-01.json');
  const plaintext = example.input.plaintext;
  const key = base64url.toBuffer(example.input.enveloped.recipients[0].key.k);

  const data = example.output.cbor;
  const buf = await cose.encrypt.read(data, key);
  t.true(Buffer.isBuffer(buf));
  t.true(buf.length > 0);
  t.is(buf.toString('utf8'), plaintext);
});

test('decrypt enc-pass-01', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-pass-01.json');
  const plaintext = example.input.plaintext;
  const key = base64url.toBuffer(example.input.enveloped.recipients[0].key.k);
  const data = example.output.cbor;
  const buf = await cose.encrypt.read(data, key);
  t.true(Buffer.isBuffer(buf));
  t.true(buf.length > 0);
  t.is(buf.toString('utf8'), plaintext);
});

test('decrypt enc-pass-02', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-pass-02.json');
  const plaintext = example.input.plaintext;
  const key = base64url.toBuffer(example.input.enveloped.recipients[0].key.k);
  const options = {
    externalAAD: Buffer.from(example.input.enveloped.external, 'hex')
  };
  const data = example.output.cbor;
  const buf = await cose.encrypt.read(data, key, options);
  t.true(Buffer.isBuffer(buf));
  t.true(buf.length > 0);
  t.is(buf.toString('utf8'), plaintext);
});

test('decrypt enc-pass-03', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-pass-03.json');
  const plaintext = example.input.plaintext;
  const key = base64url.toBuffer(example.input.enveloped.recipients[0].key.k);
  const data = example.output.cbor;
  const buf = await cose.encrypt.read(data, key);
  t.true(Buffer.isBuffer(buf));
  t.true(buf.length > 0);
  t.is(buf.toString('utf8'), plaintext);
});

test('decrypt enc-fail-01', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-fail-01.json');
  const key = base64url.toBuffer(example.input.enveloped.recipients[0].key.k);
  const data = example.output.cbor;

  try {
    await cose.encrypt.read(data, key);
    t.fail('Unknown tag, 995');
  } catch (error) {
    t.is(error.message, 'Unknown tag, 995');
  }
});

test('decrypt enc-fail-02', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-fail-02.json');
  const key = base64url.toBuffer(example.input.enveloped.recipients[0].key.k);
  const data = example.output.cbor;

  try {
    await cose.encrypt.read(data, key);
    t.fail('Unsupported state or unable to authenticate data');
  } catch (error) {
    t.is(error.message, 'Unsupported state or unable to authenticate data');
  }
});

test('decrypt enc-fail-03', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-fail-03.json');
  const key = base64url.toBuffer(example.input.enveloped.recipients[0].key.k);
  const data = example.output.cbor;

  try {
    await cose.encrypt.read(data, key);
    t.fail('Unknown or unsupported algorithm -999');
  } catch (error) {
    t.is(error.message, 'Unknown or unsupported algorithm -999');
  }
});

test('decrypt enc-fail-04', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-fail-04.json');
  const key = base64url.toBuffer(example.input.enveloped.recipients[0].key.k);
  const data = example.output.cbor;

  try {
    await cose.encrypt.read(data, key);
    t.fail('Unknown or unsupported algorithm Unknown');
  } catch (error) {
    t.is(error.message, 'Unknown or unsupported algorithm Unknown');
  }
});

test('decrypt enc-fail-06', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-fail-06.json');
  const key = base64url.toBuffer(example.input.enveloped.recipients[0].key.k);
  const data = example.output.cbor;

  try {
    await cose.encrypt.read(data, key);
    t.fail('Unsupported state or unable to authenticate data');
  } catch (error) {
    t.is(error.message, 'Unsupported state or unable to authenticate data');
  }
});

test('decrypt enc-fail-07', async t => {
  const example = jsonfile.readFileSync('test/Examples/enveloped-tests/env-fail-07.json');
  const key = base64url.toBuffer(example.input.enveloped.recipients[0].key.k);
  const data = example.output.cbor;

  try {
    await cose.encrypt.read(data, key);
    t.fail('Unsupported state or unable to authenticate data');
  } catch (error) {
    t.is(error.message, 'Unsupported state or unable to authenticate data');
  }
});